invoice-creator
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references 'reportlab' as a dependency. ReportLab is a standard and reputable open-source Python library used for programmatically creating PDF documents.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process user-provided data to generate invoices. While this creates a potential surface for indirect injection, the skill includes explicit guidelines for input validation and lacks high-risk capabilities such as network exfiltration or shell execution that would make such an injection exploitable.
- [SAFE]: No obfuscation, hardcoded credentials, remote code execution patterns, or persistence mechanisms were found in the skill content or metadata.
Audit Metadata